Friday, September 30, 2016

KEY LOAN FINANCIAL SERVICES

BUSINESS AND PERSONAL FUND (LOAN) OFFER CONTACT US FOR MORE DETAILS
____________________________________________
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.Food and Drug Administration, Philippines

Email analysis :

NOTE : charlesalexroot@gmail.com
NOTE : majturrea@fda.gov.ph
NOTE : Received : from [10.187.0.214] (unknown [197.210.24.129])


NOTE : by mail.fda.gov.ph (Postfix) with ESMTPSA
NOTE : Received : from mail.fda.gov.ph (mail.fda.gov.ph. [122.3.253.118])


NOTE : fda.gov.ph ?
NOTE : www.fda.gov.ph


NOTE : mail.fda.gov.ph is open and majturrea is a weak account...

4.000.000 ?


Hiermit teilen wir Ihnen mit, dass Sie die Summe von 4 Millionen Euro, freundlich antworten per E-Mail, um zu gewinnen wurden ausgewählt:
frankaeron101@gmail.com für die Inanspruchnahme

----------------------------------------------------------------
Free Broadband from imag!ne! http://www.imagine.ie/

Email analysis :

NOTE : frankaeron101@gmail.com
NOTE : User-Agent : Internet Messaging Program (IMP) H3 (4.1-cvs)
NOTE : X-Imap-User : eamonnodowd
NOTE : Received : from secured-by.zenmate.com
NOTE : (secured-by.zenmate.com [91.109.30.101])


NOTE : by webmail.imagine.ie (Horde MIME library)


NOTE : Scam using a VPN from (@ZenMate) and the IMP webmail from imagine.ie (@imaginelte) with account eamonnodowd

Wednesday, September 28, 2016

OFFER LATTER FROM HENK BOELENS,, /

Utility & Trust Deposit Fin. Inc.
7th Floor 2 George Yard
Lombard Street
London EC3V 9DH

Dear Friend

Please accept my apologies if this request does not meet your personal ethics as it is not intended to cause you any embarrassment in what ever form. I got your contact email address from the internet directory and decided to contact you for this transaction that is based on trust and your outstanding. I have an interesting business proposal for you that will be of immense benefit to both of us. Although this may be hard for you to believe because i know that there is absolutely going to be a great doubt and distrust in your heart in respect of this email as this might sound strange to you and coupled with the fact that, so many individuals have taken possession of the Internet to facilitate their nefarious deeds, thereby making it extremely difficult for genuine and legitimate persons to get attention and recognition. Please grant me the benefit of doubt and hear me out.

My name is Henk Boelens . I work with Utility and Trust Deposit Finance here in London-UK as a branch manager. I discovered an abandoned sum of GBP 19,850,000.00 (Nineteen Million Eight Hundred And Fifty Thousand British Pounds) in an account that belongs to one of our foreign customers, Late Dr. Erin Jacobson, an American citizen who unfortunately lost his life and his entire family in Montana plane crash on March 23, 2009, on their way to a group ski vacation. The choice of contacting you is aroused from the geographical nature of where you live, particularly due to the sensitivity of this transaction and the confidentiality herein. Now our bank has been waiting for any of the relatives to come up for the claim but nobody has done that. I personally tried to locate any member of his family but have been unsuccessful in locating the relatives for 7 years now, i have also checked the deposit documents and discovered that he did not declare any next of kin on the deposit.

Now the Management of our bank as instructed me to look for the next of kin or they will convert the funds into the Government Treasury Account as unclaimed funds and the funds will be wasted. Therefore, I cannot claim these funds without presenting a foreigner to stand as next of kin. This is the reason why I contacted you to seek your consent to present you as a next of kin so that the funds will be release to you, then we share it 50% for me and 50% for you and is deal between me and you. I have employed the service of an Attorney who will secure all necessary legal documents that could be used to back up this claim. All the attorney need to do is to fill in your names to the documents and legalize it in the Court here to prove you as the legitimate next of kin to the late depositor Dr. Erin Jacobson then the bank will release the funds to you as the rightful beneficiary.

This is a fair deal without any risk attached either on your part or on my part as long as we comply with the laws governing the claiming of funds in our establishment. All I require is your honest co-operation to enable us see this deal through, and with my position in the bank as a bank manager, I will do every thing possible to protect your interest and to make sure everything workout successfully. If you are interested in this deal, kindly send me your complete information, your full names and address, Your Private telephone and Fax numbers, and Cell phone so that the attorney will start processing the necessary paperwork that would facilitate the release of the funds to you.

Best regards,

Henk Boelen

Email analysis :

NOTE : henkboelens67@gmail.com
NOTE : sale@drysuit.ru
NOTE : Received : from [128.199.40.168] (helo=User)


NOTE : by f4.radisol.ru with esmtpa (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256)
NOTE : (Exim 4.84_2) (envelope-from < sale@drysuit.ru >)
NOTE : Received : from unknown (HELO s3.radisol.ru) (95.213.144.13)

GOOD NEWS

In accordance to my religious persuasion and total submission to the will of God almighty, I felt expedient to write and inform you on the wicked conspiracy hatched by Dr.David Edward director WESTERN UNION MONEY TRANSFER Benin and Mr Hugh Graham(The foreigner he involved) to divert your approved inheritance funds to their designated account in Europe. From my position as a loyal clerk in this office, I discovered that they moved your fund of US$1.5M to Switzerland Europe several months ago with intention of sharing it between themselves if they had succeeded .

Just Two weeks ago I found out through the Central computer data-base that they are about to re-route your fund from Barclays Bank United Kingdom to Credit Suisse Groupe Switzerland before European Financial Regulators traced the money and informed the Benin financial regulators for verification, I felt that it is important for me to alert you on this development.

They are still using your name and inheritance identification number as the beneficiary but they have changed the account co-ordinate claiming that you were the person who asked them to represent you and authorized them to transferred the money out of Benin to Europe.This was the reason why they asked you for endless fee to frustrate you so as to abandon the claim for them to enrich themselves

I have the reference number of the transaction . Your payment is supposed to go through the Swiss credit control financial clearing house
before finally Lodge into their SWiss account the European financial regulators traced the fund and informed the Benin financial regulators who has involved since last week Friday.

All the data about your claim profile are within my reach. I do not need gratification from you either in cash or kind. I can never be a part of this evil because of my religion. Please respect my discretion in this matter, you can send an email to me so that I can give you the reference number and the name and contact information of the officials of the Benin financial regulatory commission involve now.

NOTE I repeat, please do not expose my person, it is not easy to get employment around here and I cannot contend with these powerful individuals because they can eliminate me just like that. Just stop communicating with either of those men who desperately want to extort money from you to flee particularly the wicked Dr.David Gibson, dont even answer any of their mails again.

Remain Blessed,

Mrs. Susann Akim
EMAIL..... mrs.susannakimm@outlook.fr

Email analysis :

NOTE : GOOD NEWS
NOTE : alara@mindeporte.gob.ve
NOTE : mrs.susannakimm@outlook.fr
NOTE : X-Originating-Ip : [173.193.202.116]


NOTE : Mime-Version : 1.0
NOTE : smtp.mailfrom=alara@mindeporte.gob.ve
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Mailer : Zimbra 6.0.7_GA_2473.DEBIAN5
NOTE : (ZimbraWebClient - FF3.0 (Win)/6.0.7_GA_2473.DEBIAN5)
NOTE : Received : from correo.mindeporte.gob.ve
NOTE : (correo.mindeporte.gob.ve. [200.11.198.218])


NOTE : Received : from localhost (localhost.localdomain [127.0.0.1])
NOTE : by correo.mindeporte.gob.ve (Postfix)
NOTE : Received : from correo.mindeporte.gob.ve ([127.0.0.1])
NOTE : by localhost (correo.mindeporte.gob.ve [127.0.0.1])
NOTE : Received : from correo.mindeporte.gob.ve (correo.mindeporte.gob.ve [10.1.110.10])


NOTE : https://correo.mindeporte.gob.ve/zimbra/?zinitmode=http ?
NOTE : Zimbra
NOTE : account : alara
NOTE : http://www.mindeporte.gob.ve


NOTE : #Relay > @Mindeporte

FedEx Have A Package For You.

FedEx Courier Service,
Address : Sheikh Zayed Road 26th Floor
Dubai Media City 9239 UAE Dubai
Tel: +971523071066
Fax: +971 4-331-0718
Fax: +971 4-332-2304
Email: fdxpackagedelivery@yandex.com
Website: http://www.fedex.com/ae/
Customers Service Hours–Monday to Sunday

Attention: Valuable Customer,

We have a Parcel containing an International Cashier Bank Draft/Cheque worth the sum of Four Million One Hundred And Eighty Thousand United State Dollars ($4,180,000.00USD) and also an Apple MacBook Pro and Apple iPhone (6S+) mobile phone added to your package which will be deliver to you at the moment as long as you provide all the requirement information to the FedEx package company before the parcel can be shipped to your own residential address in your country. Furthermore, you might be asking yourself how come this email, cheque or draft, Anyway, your cheque was brought to our office by the Coca-Cola Bottling Company via a Lottery Fiduciary Claim Agent, signifying that you are a rightful winner to their Lottery Award Promo selected randomly which is powered by the Coca-Cola Bottling Company and also the Apple Company of United Arab Emirates. The main aim of this promo is to advertise the Coca-Cola Bottling Company product and the Apple Company product worldwide. Your e-mail address was among the (5) lucky email addresses that make your email address as one of the lucky email address and they have decided to send it to you through Federal Express Delivery Service. What you have to do now is to contact our Delivery Department for immediate dispatch to your residential address.

For your information, the Lottery Fiduciary Company has paid the Delivery fee and Security keeping fee & Shipping charges as well as the Vat fees; you will have to pay a sum of $280.00 USD to the FedEx Delivery Department being payment for the Insurance Fee of the FedEx Company. All you have to do is to insure your winning parcel with the Insurance Company, which is registered with FedEx United Arab Emirates Dubai. The reason why you are been ask to pay for the Insurance fee is because of the fact that all items & packages that is not Insured by the insurance company of United Arab Emirates Dubai are not allowed to be delivered to their delivery address. So you are to pay the FedEx Courier Service the Insurance Fee to enable the insurance company insured your winnings for delivery.

As soon as you effect the payment our delivery team will take your Insurance fee, they will proceed to the insurance company to Insure your winning funds, as soon as it is been Insured by the insurance company of United Arab Emirates Dubai we shall commence with your delivery without any delay and also we shall provide you with the Insurance receipt that was given to us by the insurance company as a proof that you have Insured your package for delivery. The main reason why you are been ask to Insure your Winning Funds is to certify that the package is not a Drug Affiliated Fund (DAF) neither is the funds to sponsor Terrorism in your country this will help you to avoid any form of query from the Monetary Authority of your country. And also we cannot take the risk to carry out the delivery of your funds in-case of any possible demurrage. You have to contact our delivery team and ask them how you are going to make the payment of the Insurance fee of your funds. We hope that you will respond to us as soon as possible because if you fail to respond until the expiry date of this package, we may refer the package to United Arab Emirates Dubai Commission of Welfare Or better still to Coca-Cola Bottling Company or Apple Company. Kindly contact the delivery department (FedEx Delivery Post) with the details given below:

Delivery Manager.
Name: Rev.Maxwell Ford
Tel: +971523071066
Email: fdxpackagedelivery@yandex.com

Do provide us with this information, and it's mandatory to reconfirm your Postal address and telephone numbers to enable us commence with your delivery and mostly to enable us insure your Winning Funds and also do provide us with any scanned copy of any proof of your identification.

=========================================
Do Provide Us With The Information Below
=========================================
Your Full Names -------------
Your Home Address ----------------
Date of Birth ----------------------
Your Contact Phone or Mobile Number ------------------------
Occupation -------------------------
Marital Status ---------------------
Country ----------------
Your State ------------------
========================================

Kindly complete the above form and summit it to the delivery manager on fdxpackagedelivery@yandex.com) As soon as your details are received, our delivery team will give you the necessary payment procedure so that you can effect the payment for the Insurance Fee. As soon as they confirm your payment of $280.00 USD, they will not hesitate to work straight to the insurance company and insure your winning for delivery. It usually takes 24 hours being an overnight delivery service to deliver your winning funds to you after it has been insured by the insurance company. We were instructed to email you by Coca-Cola Bottling Company and also the Apple Company due to the high priority of your package we had to inform you through the letter that was attach in your package.Ensure to contact our delivery department with the email address given above and ensure to fill the form as well to enable a successful reconfirmation and a safe delivery of your winning.

Yours Faithfully,
Mrs. Aisha Philips
FedEx Online Team Management®
© Copy Right Reserved 1994-2016.

Email analysis :

NOTE : FedEx Have A Package For You.
NOTE : fdxpackagedelivery@yandex.com
NOTE : seccionbasededatos@ceip.edu.uy
NOTE : Received : from [192.168.1.103] (unknown [109.177.33.226])



NOTE : by correo.ceip.edu.uy (Postfix)



NOTE : https://correo.ceip.edu.uy ?
NOTE : Zimbra
NOTE : seccionbasededatos@ceip.edu.uy
NOTE : Account : seccionbasededatos


NOTE : https://ceip.edu.uy ?


NOTE : SCAM from an edu.uy server.

INTERNATIONAL PROMOTIONS/PRIZE AWARD

Facebook Corporate Office & Headquarters
1601 Willow Road Menlo Park, CA 94025
INTERNATIONAL PROMOTIONS/PRIZE AWARD.
CATEGORY: 2ND

Congratulations From Facebook International Online Lottery!!!

Attention Fund Beneficiary

Facebook the largest Social Networking site valued more than $100 Billion Dollars and also expecting its One Billion Users to come mainly from Mobile devices than desktop Users by 2016, Facebook founder Mark Zuckerberg has decided to boost Users and Companies a WINDOW OF OPPORTUNITY by Lottery Program and Initial Public Offer said in a press release. We are very happy to inform you that your name appear on the Facebook International Lottery Promo for the total sum of $1,000,000.00 USD & Brand New Honda 2016 (One Million United States Dollars) which is what you have just won. Your name was selected in a raffle that was made 25th of September 2016 so we need your fast response so that we can proceed with the process of your winnings. Your name was selected by Mr. Mark Zuckerberg the CEO of Face book (Founder & Chief Executive Officer) The promotion was made to make all Facebook User Benefit from the gain the company made Facebook is a the first and ever largest means of meeting both old and new friend your unique winnings code is (1544) this most not be given to any body until you have your winnings to avoid lost. The promo was done to serve as a means of appreciation to visitors on our site and also to help people to fight off poverty and to maintain the standard of living. However for the purpose of proper verification among other relevant information, it is imperative that you forward your claims to our claim department with the below details. You are advised to contact the payment and the head office department of your Funds and with your details:

1 Full Name-----
2. PHONES AND FAX NUMBER ----
3. ADDRESS ---
4. YOUR AGE: --
5.CURRENT OCCUPATION-----
6. Home Equity {YES OR NO}. ----
6. Identity/Sex. ---:

With the email below so that they can proceed with the process of your winnings.

Contact Name Mrs Ruth Williams
Email: (claimdepartmentfacebook1@gmail.com)

Leave a voice message stating your name to the office of Facebook Promo Coordinator Mr. Patrick Widen via Phone: (202) 524-2220 To avoid unnecessary delays and complications please remember to quote your Ticket, Reference and Batch Numbers in all correspondences. View the link of our Official Website (https://www.facebook.com/BigLotteryFund) Acknowledge this mail by replying back immediately.

CONGRATULATIONS ONCE AGAIN FROM FACEBOOK!

Thank you.
Patrick Widen
Promo Coordinator
FBI SCAM PROTECTED.

Email analysis :

NOTE : noreply@facebook.org
NOTE : claimdepartmentfacebook1@gmail.com
NOTE : X-Originating-Ip : [105.13.66.57]

St Mary's Hospital

SELL A KIDNEY. SAVE A LIFE AND MAKE MONEY.

Do you want to sell your kidney to save a life? Are you seeking for an opportunity to sell your kidney at a good price? Here is an opportunity for you to sell for 500,000 pounds. Interested sellers should contact DR. NIGEL BASHEER, a Nephrologist and consultant surgeon at ST. MARY'S HOSPITAL. For more information contact us via Email: stmaryskidneytransplantcentre@gmail.com

Email analysis :

NOTE : Dr Nigel Basheer
NOTE : stmaryskidneytransplant@outlook.com
NOTE : SCAM !

Monday, September 26, 2016

Mutual Transaction

I am Mr.Karim Karoui a Banker First Gulf Bank Dubai U.A.E,An account officer to Adona Gold Ltd A national of your country based in Dubai U.A.E, before I rose to the position of Managing Director. , engineer who ran car maker BMW museum and also an oil consultant died along with his entire family in this resent Malaysia ghastly air crash in Indian Ocean that claim the lives of all the 239 passengers You may click this link below for Verification. (http://www.bbc.com/news/world-asia-26503141)

Since his wife was his next of kin and she was in the missing plan also, I decided to trace his relatives over the Internet to locate any member of his family but of no avail, hence I contacted you. I have contacted you to assist in repatriating the money that belongs to my client before it declared unserviceable by the bank management where these huge deposits were lodged. Particularly, the Bank where the deceased had an account valued $5,900,000.00 and 20 killos of gold bar metals the management of my bank has been finding means to reach him so as to ascertain if he will roll over the Deposit or have the contract sum withdrawn. When I discovered that this will happen, I have tried to come up a procedure to preserve this fund and use the proceeds for business.

Some directors here have been trying to find out from me the information about this account and the owner, but I have kept it confidential because I know that if they become aware that He is late, they will corner the funds for themselves. Therefore, am seeking your co-operation to present you as the one to benefit from his fund since you have the same surname, my bank headquarters will pay the funds to you as his next of kin. I have done enough inside bank arrangement and i only have to put in your details into the information network in our bank database and your name will be reflect you as his next of kin.

I seek your consent to present you as the next of kin of the deceased so that the proceeds of this can be paid to you and then you and I can share the money. 70% to me and 25% to you, while 5% should be for expenses or tax as your government may require, I have the certificate of deposit that can be used to back up any claim we may make. All I require is your moral support.

I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law. Please get in touch with me by my email to enable us discuss further.(karimmttd@gmail.com)

Provide me with the information below:

1. Your Full Name:
2. Your Resident/Office Address:
3. Your Marital Status:
4. Your Age:
5. Your Occupation:
6. Private Telephone:

This is to affect the swift transfer of this fund into your account in less than Three (5) Working days
Best regards,
Mr.Karim Karoui

Email analysis :

NOTE : imfteamsgh@gmail.com
NOTE : Ip=[72.237.91.131];Helo=[mail.fayettecti.org]


NOTE : Received : from User (87.138.65.146) by server-8.fvt-nt.fayettevo-tech.org (10.0.0.11)

CONGRATULATIONS !!!

Special report, Note: PAYMENT TO MAKE BY TT AND ATM CARD

Please bear with us since it is a new payment policy to eradicate fraud.

We are pleased to inform you of the announcement made today, You are among the winners of the microsoft 2016 INTERNATIONAL PROMOTION PROGRAM Participants were selected through a computer ballot system drawn from 2,500,000 email addresses of individuals and companies from all part of the world as part of our electronic business Promotions Program. As a result of your visiting various websites we are running the e-business promotions for. You/Your Company email address, attached to ticket number 343-221-8756, with serial number 454-17 drew the lucky numbers 3, 8, 13, 22, 27, 41 and Bonus number 12 , Your INSURANCE Number: FLS433/ 453L /GMSA and consequently you won in the Second Category of the 2016 microsoft International.

You have therefore been approved for the payment of the sum of US$1,000 000, 00 in cash ONE MILLION DOLLARS

Please contact the claim agent below to receive your award prize.
Claim agent : Mr Martin Groben
Google Microsoft Award Department
Tel : +44-2035142636
Fax: +44-2035147453
Email :martingroben99@gmail.com

Congratulation!!
AGAIN: Name in full:
2.Address:
3.Nationality:
4.Age:
5.Occupation:
**Monthly Salary:
6.Telephone Number:
7.Present Country:
8.Short comment on our products. [Optional]
9. Fax [optional]
10.Email address:
11.City
12.postal cod
13.Ticket No:
14.Serial No
15.Lucky No
16.Ins.No:

Send above information in your correspondences with your claims agent

EMAIL ANALYSIS :

NOTE : martingroben99@gmail.com
NOTE : urgentnotice01022@cash4u.com
NOTE : Received : from 41.207.160.93 by mail.anps.com.tw

Your Netflix Membership has been suspended [#839653] ( Phishing )

Validation failed

During a routine check of your account we have failed to validate the billing method we have on record for your account.

To continue using the Netflix service you will need to update/verify your billing information.

CONTINUE >>

Please note that failure to complete the validation process will result in permanent suspension of your netflix membership.

We thank you for your understanding.

Netflix Billing Support

Email analysis :NOTE :

Screenshot of the email :


Phishing analysis :

CLICK : CONTINUE >>
OPEN : http://memrenew02.com/
REDIRECT : http://membership.netflix.co.cgi-key.confirm.eu.web.mynetflix.webscmd.user398742987.renewplan3.com/email_identifier=*/ALL/Login.php
SCREENSHOT :


CLICK : Sign In
REDIRECT : http://membership.netflix.co.cgi-key.confirm.eu.web.mynetflix.webscmd.user398742987.renewplan3.com/email_identifier=*/ALL/YourAccountBilling.php
SCREENSHOT :


CLICK : Update Billing Address
REDIRECT : http://membership.netflix.co.cgi-key.confirm.eu.web.mynetflix.webscmd.user398742987.renewplan3.com/email_identifier=*/ALL/YourAccountPayment.php
SCREENSHOT :


CLICK : Update Payment Method
REDIRECT : http://membership.netflix.co.cgi-key.confirm.eu.web.mynetflix.webscmd.user398742987.renewplan3.com/email_identifier=*/ALL/YourAccountUpdated.php
SCREENSHOT :


CLICK : Continue To Login
REDIRECT : http://membership.netflix.co.cgi-key.confirm.eu.web.mynetflix.webscmd.user398742987.renewplan3.com/email_identifier=*/ALL/Sessions/Home.html
REDIRECT : https://www.netflix.com/us-en/Login

WHOIS : memrenew02.com

Registrar CRAZY DOMAINS FZ-LLC
Name Server NS1.CRAZYDOMAINS.COM
Name Server NS2.CRAZYDOMAINS.COM
Expiration Date 24-sep-2018
Registrant Name MARTIN SINDELAR
Registrant Phone +44.7391544185
Registrant Email SINDELAR-M20@SEZNAM.CZ
Whois Server Version 2.0
Domain Name MEMRENEW02.COM
Registrar CRAZY DOMAINS FZ-LLC
Sponsoring Registrar IANA ID 1291
Whois Server whois.crazydomains.com
Referral URL http://www.crazydomains.com
Name Server NS1.CRAZYDOMAINS.COM
Name Server NS2.CRAZYDOMAINS.COM
Status ok https://icann.org/epp#ok
Updated Date 24-sep-2016
Creation Date 24-sep-2016
Expiration Date 24-sep-2018
Last update of whois database Mon, 26 Sep 2016 02:55:04 GMT
Registry Domain ID 2061620692_DOMAIN_COM-VRSN
Registrar WHOIS Server whois.syrahost.com
Registrar URL http://www.crazydomains.com
Updated Date 2016-09-25T03:04:52Z
Creation Date 2016-09-24T00:00:00Z
Registrar Registration Expiration Date 2018-09-24T00:00:00Z
Registrar IANA ID 1291
Registrar Abuse Contact Email domains@crazydomains.com
Registrar Abuse Contact Phone +61.894220890
Reseller CRAZY DOMAINS
Domain Status ok https://icann.org/epp#ok
Registry Registrant ID 21272770
Registrant Name MARTIN SINDELAR
Registrant Street 26 ALTHORP CLOSE
Registrant City LEICESTER
Registrant State/Province LEICESTERSHIRE
Registrant Postal Code LE2 9GT
Registrant Country GB
Registrant Phone +44.7391544185
Registrant Email SINDELAR-M20@SEZNAM.CZ
Registry Admin ID 7945416
Admin Name MARTIN SINDELAR
Admin Street 26 ALTHORP CLOSE
Admin City LEICESTER
Admin State/Province LEICESTERSHIRE
Admin Postal Code LE2 9GT
Admin Country GB
Admin Phone +44.7391544185
Admin Email SINDELAR-M20@SEZNAM.CZ
Registry Tech ID 7945416
Tech Name MARTIN SINDELAR
Tech Street 26 ALTHORP CLOSE
Tech City LEICESTER
Tech State/Province LEICESTERSHIRE
Tech Postal Code LE2 9GT
Tech Country GB
Tech Phone +44.7391544185
Tech Email SINDELAR-M20@SEZNAM.CZ
DNSSEC unsigned
Last update of WHOIS database 2016-09-25T03:04:52Z

WHOIS : renewplan3.com

Registrar CRAZY DOMAINS FZ-LLC
Name Server NS1.CRAZYDOMAINS.COM
Name Server NS2.CRAZYDOMAINS.COM
Expiration Date 24-sep-2017
Registrant Name BARBARA TUROMSZA
Registrant Phone +61.0431447733
Registrant Email BARBARATUROMSZA@BIGPOND.COM.AU
Whois Server Version 2.0
Domain Name RENEWPLAN3.COM
Registrar CRAZY DOMAINS FZ-LLC
Sponsoring Registrar IANA ID 1291
Whois Server whois.crazydomains.com
Referral URL http://www.crazydomains.com
Name Server NS1.CRAZYDOMAINS.COM
Name Server NS2.CRAZYDOMAINS.COM
Status ok https://icann.org/epp#ok
Updated Date 24-sep-2016
Creation Date 24-sep-2016
Expiration Date 24-sep-2017
Last update of whois database Mon, 26 Sep 2016 02:57:49 GMT
Registry Domain ID 2061455735_DOMAIN_COM-VRSN
Registrar WHOIS Server whois.syrahost.com
Registrar URL http://www.crazydomains.com
Updated Date 2016-09-24T14:26:46Z
Creation Date 2016-09-24T00:00:00Z
Registrar Registration Expiration Date 2017-09-24T00:00:00Z
Registrar IANA ID 1291
Registrar Abuse Contact Email domains@crazydomains.com
Registrar Abuse Contact Phone +61.894220890
Reseller CRAZY DOMAINS
Domain Status ok https://icann.org/epp#ok
Registry Registrant ID 21271357
Registrant Name BARBARA TUROMSZA
Registrant Street 46 GRENFELL STREET MOUNT GRAVATT EAST
Registrant City BRISBANE
Registrant State/Province QLD
Registrant Postal Code 4122
Registrant Country AU
Registrant Phone +61.0431447733
Registrant Email BARBARATUROMSZA@BIGPOND.COM.AU
Registry Admin ID 7945205
Admin Name BARBARA TUROMSZA
Admin Street 46 GRENFELL STREET MOUNT GRAVATT EAST
Admin City BRISBANE
Admin State/Province QLD
Admin Postal Code 4122
Admin Country AU
Admin Phone +61.0431447733
Admin Email BARBARATUROMSZA@BIGPOND.COM.AU
Registry Tech ID 7945205
Tech Name BARBARA TUROMSZA
Tech Street 46 GRENFELL STREET MOUNT GRAVATT EAST
Tech City BRISBANE
Tech State/Province QLD
Tech Postal Code 4122
Tech Country AU
Tech Phone +61.0431447733
Tech Email BARBARATUROMSZA@BIGPOND.COM.AU
DNSSEC unsigned
Last update of WHOIS database 2016-09-24T14:26:46Z

Russell Cooke

Dear sir ,

Please do accept my apologies. I do not wish to invade your privacy, I had written an earlier email to you, but without a response, In my first email, I mentioned to you about my late client Mr. Bruno.Since his death I have received several notifications from his Bank where he made a time deposit of ($7,500,000.00) before his death.The bank has asked me to provide his next of kin or any of his dependent relatives who can make claim to his funds for payment or it will be confiscated by the government.Since I could not locate any of his relatives,I have to contacted you for this claim since you are trust worthy and serious.

Upon your response to me, I would give you the details and procedures for collecting the funds smoothly.

Thank you sir for your time.

Yours sincerely,

Russell Cooke (Q.C)

Email analysis :

NOTE : jcc@cq.stats.cn
NOTE : rc19006@outlook.com
NOTE : Received : from User (217.160.182.57)


NOTE : by CQ-EXHC-02.cq.stats.cn (10.50.99.54)
NOTE : 222.180.197.2 ()

Florian Burtard

I am Vincent Cheng Chairman of the Shanghai Banking Limited.I have a confidential brief from Hong Kong,asking for your partnership for funds transfer.Reply to me with my email vinctcheng1@hotmail.com if interested?

Regards
Vincent Cheng

forwarded to you by Florian Burtard,Secretary.

Email analysis :

NOTE : fburtard@ent-place.fr
NOTE : Received : from mx01.ent-place.fr
NOTE : (mx01.ent-place.fr. [194.214.114.170])


NOTE : X-Originating-Ip : [172.25.252.146]

Saturday, September 24, 2016

Financial Hjálp

Við getum hjálpað þér með lán allt frá € 2,000.00 til € 5,000,000.00 á 3,15% vöxtum á ári. Við erum einkafyrirtæki sem fólk í þörf fyrir hjálp peninga án BKR athugun. fyrir frekari upplýsingar; (lending.tree@charter.net) We can help you with a loan ranging from € 2,000.00 to € 5,000,000.00 at 3.15% interest per year. We are a private company which people in need of money help without BKR scrutiny. for more info ;(lending.tree@charter.net)

Email analysis :

NOTE : lending.tree@charter.net
NOTE : Ferrisl@email.sc.edu
NOTE : X-Originating-Ip : [116.202.154.213]


NOTE : Mime-Version : 1.0

GRANT PAYMENT CENTER(GPC) GLOBAL BANK HEADQUATER NEW YORK U.S.A.

GRANT PAYMENT CENTER(GPC) GLOBAL BANK HEADQUATER NEW YORK U.S.A. We have been notice that you have not been paid for long over due grant payment by the UN. This is due to so corrupt hoodlums and some corrupts government officials who try to divert your money into their private pocket. We have arrange your payment through international ATM CARD. Payment center this is some of the instruction passed by the united nation in respect to all over delayed payment center department will send you your ATMCARD VALUED SUM OF ($8M) Which you are to use in any where in the world. And the maximum withdrawal is $15,000. So kindly contact the payment center on (grant.payment.center@gmail.com) with the bellow information current residential address direct phone number. Arrangement has been made to procced the delivery through our liable courier agent. Best read bell lorris +1 706 503 2156 +229 986 638 26

Email analysis :

NOTE : aaronthreep.wood@gmail.com
NOTE : vorotak@server.hetzner.in.ua
NOTE : client-ip=148.251.15.212;

oferta de financiamento

Eu sou um francês bolsas individuais de dinheiro do empréstimo 5.000€ a 5.000.000€ para qualquer pessoa capaz de pagá-lo com uma taxa de juros de 2 a 3% ao ano e um período variando de 1 a 35 anos, dependendo da quantidade solicitada. Fazemo-lo nas seguintes áreas: - Financeira de Crédito Home Loan Investimento Auto empréstimo Dívida consolidação empréstimo crédito empréstimo pessoal Redemption Criação de Empresas. Você está preso, se você está realmente precisando, por favor contacte-me para mais informações. Entre em contato conosco pelo e-mail: cecilejosee.guillerme@gmail.com

Email analysis :

NOTE : morten@josefsen.org
NOTE : cecilejosee.guillerme@gmail.com
NOTE : User-Agent : Workspace Webmail 6.5.0
NOTE : X-Originating-Ip : 207.244.86.195


NOTE : client-ip=72.167.218.226;

Tammy Pratt

Hello, I am Tammy Pratt the mega winner of $126M In Mega Millions Jackpot, I'm donating to 5 random individuals if you get this email then your email was selected after a spin ball.I have spread most of my wealth over a number of charities and organizations. I have voluntarily decided to donate the sum of $2 Million USD to you as one of the selected 5, to verify my winnings please see my you tube page below. WATCH ME HERE: https://www.youtube.com/watch?v=I2utlVhjLwQ&oref THIS IS YOUR DONATION CODE: [ 2312011 ] Reply with the DONATION CODE to this email: tammypratt011@gmail.com Hope to make you and your family happy. Regards Tammy Pratt

Email analysis :

NOTE : profis@ufma.br
NOTE : tammypratt011@gmail.com
NOTE : (unknown [111.118.150.213]) by carolina.ufma.br


Video :

Thursday, September 22, 2016

Dear Friend. My private email address is (mrshmaria@foxmail.com

Dear Friend.

I am Mrs. Maria, the Head of file Department in Bank of Africa. I seek your assistance and I am assured of your capability to champion this business opportunity, to remit the sum of $10.5 million U S dollars into your account. If you are interested please let me know so that i can send you the full details of this transaction. I agree that 40% of this money will be for you, while 10% will be set aside for all expenses incurred during the business and 50% would be for me. If you are interested to execute this business with me, you should contact me in my private email and provide me the below requested information to avoid any delays, and I will furnish you with more elaborate information. My private email address is (mrshmaria@foxmail.com)

(1)Your Name
(2)Your age.........................
(3)Your occupation..................
(4)Your full residential address...............
(5)Your private phone and fax number

I await your prompt response. Best regards,

Mrs. Maria
Email(mrshmaria@foxmail.com)

call me if you are instrested +226 65369757

Email analysis :

NOTE : u_oi@aol.fr
NOTE : Received : from 88.150.176.22

Assurance ****** (Hameçonnage Ameli)

Madame,Monsieur

Après les derniers calculs de votre assurance maladie , nous avons déterminé que vous êtes admissible à recevoir un remboursement d'un montant de 99.00 euro. Nous vous invitons à consulter les démarches à suivre en Cliquant-ici

Cordialement,

Ameli.fr - assurance maladie ameli 2016 France
https://www.ameli.fr

Email analysis :

NOTE : onrage.forge@paltalk.free.fr
NOTE : Cmm-Sender-Ip : 104.47.36.75


Phishing analysis :

CLICK : Cliquant-ici
OPEN : http://exxpo.com.br/js/extjs/js.html
RESULT : Phishing was removed...

documents (Virus)

Ramona huger Office Manager
Box Rentals LLC
Sanibel Executive Suites
Crestwood Apts.
Cleveland Apts.
rayatboxrentals@cableone.net
www.sanibelsuites.com
2230 East 8th St / Office
Joplin, Mo.64801
Cell-417-312-3661
Office-417-624-7900
Fax- 417-624-7971

5496921_55724.zip

Email analysis :

NOTE :

NOTE : Return-Path : < ramona.huger@cableone.net >
NOTE : Mime-Version : 1.0
NOTE : Message-Id : < *.*.*.JavaMail.zimbra@cableone.net >
NOTE : X-Mailer : Zimbra 8.0.7_GA_6021 (ZimbraWebClient - GC46 (Win)/8.0.7_GA_6021)
NOTE : Thread-Topic : documents
NOTE : Received : from PHC-i5-VAIO (unknown [113.186.230.214])


NOTE : [SPAM] documents

File analysis :

Download : 5496921_55724.zip.
Result : 5496921_55724.zip is a virus.

Virus analysis :

SHA256 16bb72cc0a9a02626ef293df46696f489935e5890df483251976d38d1bf613d9
ALYac JS:Trojan.Crypt.PV
AVG JS/Downloader.Agent.54_Q
Ad-Aware JS:Trojan.Crypt.PV
AhnLab-V3 JS/Obfus.S137
Antiy-AVL Trojan/Generic.ASMalwRG.70
Arcabit JS:Trojan.Crypt.PV
Avira (no cloud) HEUR/Suspar.Gen
Baidu JS.Trojan-Downloader.Nemucod.jn
BitDefender JS:Trojan.Crypt.PV
CAT-QuickHeal JS.Locky.FA
Cyren JS/Nemucod.CA1
DrWeb JS.DownLoader.2236
ESET-NOD32 JS/TrojanDownloader.Nemucod.AZC
Emsisoft JS:Trojan.Crypt.PV (B)
F-Prot JS/Nemucod.CA1
F-Secure JS:Trojan.Crypt.PV
Fortinet JS/Nemucod.SMK9!tr
GData JS:Trojan.Crypt.PV
Ikarus Trojan-Ransom.Script.Locky
K7AntiVirus Trojan ( 004f43681 )
K7GW Trojan ( 004f43681 )
Kaspersky Trojan-Downloader.JS.Cryptoload.als
McAfee JS/Nemucod.jg
McAfee-GW-Edition JS/Nemucod.jg
eScan JS:Trojan.Crypt.PV
Microsoft TrojanDownloader:JS/Swabfex.P
Sophos Mal/DrodZp-A
Tencent Js.Trojan.Raas.Auto

Open Virus :

NOTE : CYTUKE64504.wsf
NOTE : Windows Script File (WSF)
NOTE : http://pastebin.com/BqrxRQqW
RAW : http://pastebin.com/raw/BqrxRQqW

CHANGE OF YOUR BANK ACCOUNT DETAILS.

CHANGE OF YOUR BANK ACCOUNT DETAILS.

We have received an official notification on 09-19-2016 from Teresa L. Haskins, who claimed that you have authorized her to handle everything concerning the release of your inheritance Fund which is US$3.5 Million as she has confirmed to us that you are now in the Hospital taking care of your cancer illness. Meanwhile, in the consideration to our Official code of conduct and services here in west, Africa, we deem it necessary that we should get in touch with you first for confirmation before we can proceed with her request. Therefore, we need your prompt instruction to proceed with her in this matter for the purpose of remitting the fund to her nominative bank account details below:-

Bank: Bank of America
Address: 1143 Nashville Pike
Gallatin, Tennessee 37066
Account Name: Teresa Haskins
Account Number: 483032646884
Electronic Transfer: 064000020
Wire Transfer: 026009593

The release of the fund will be fixed as soon as we receive your prompt response to this message. it is very important that you should get in touch with Mr. Sani Kabir with immediate confirmation to enable the bank's administrative department transfer this money to her above mentioned bank account as you instructed. Contact back via email address ( sanikabir.private@hotmail.com )

NOTE: Failure to reply will give the other option than to believe you are the one that gave her the power to receive the payment on your behalf and enable us to proceed to complete the transfer to her above nominative bank account.

Yours faithfully,
Mr. Asue Ighodalo.
Chairman, Sterling Bank Plc.

Email analysis :

NOTE : sanikabir.private@hotmail.com
NOTE : dispatch@mail.roymiller.com
NOTE : 104.167.99.34 (reversing.co.il)

LAST TRANSFER NOTIFICATION

FEDERAL MINISTRY OF FINANCE NATIONAL HOUSE OF ASSEMBLY COMPLEX SENATE HOUSE - UPPER CHAMBERS WUSE DISTRICT, COTONOU BENIN REP.
IF YOU FAIL TO SEND THE $49 THIS WEEK YOUR $2,500,000.00 IS GONE.....!!!
Our Ref: FGN /SNT/STB

CONTACT ME BACK USING THE E MAIL BELOW: (daveknight9727@gmail.com )

Compliment of the season to you and your family,

Please I have to inform you again, that we are not playing over this, I know my reason for the continuous sending of this notification to you, the fact is that you can't seem to trust any one again over this payment for what you have been in cantered in many months ago, but I want you to trust me, I cannot scam you for $49 it is for bank processing of your payment, the fees of $49 is clearly written to you before, I did not invent the bill to defraud you of $49 it is an official bank payment processing fee, and the good part of this, is that you will never, ever be disturbed again over any kind of payment/fees, this is final, and the forms from there becomes effective once we submit your payment application processing fee and pay the form fee of $49 I don't want you to loose this fund this time,

because you may never get another such good opportunity, the Federal government is keen and very determined to pay your overdue debts, this is not a fluke, I would not The processing charges which was initially on the high price has been cut down by the payout bank considering the poor economic situations that make it difficult for the middle class citizens to meet up with the processing charges of their entitlement. Upon the confirmation of your processing charges you will get your $2,500,000.00 into your account within 15hrs.

Only what you will do now is to Contact us back if you are interested of receiving your fund and information has be given to you where to send the bank processing charges to avoid wrong transaction, finally my advice to you is not to abandon this transaction because of the requirement of
($49)

SEND THE $49 TO THE DETAILS BELOW. through Western Union Or Money Gram Urgent:

Receiver Name ... Anthony Emekamu
Country .....Benin Republic.
City .................Cotonou.
Amount .....$49.00 US Dollars
Text question: When
Answer: Now

Send the payment MTCN/REF# once you have sent the $49 together with your account details for the wire transfer.

Get back to me at daveknight9727@gmail.com

Thanks

As soon as the fee payment is received, you will receive your $2.5M same today without any delay.

Best Regards
David Knight ESQ

Email analysis :

NOTE : info@finger.co.kr
NOTE : 14.63.222.224

URGENTLY CONFIRM

HELLO,
PLEASE WANT YOU TO URGENTLY CONFIRM TO ME IF YOU HAVE RECEIVED YOUR
FUND.PLEASE DO CONFIRM NOW IF YOU HAVE OR NOT.
REGARDS
REV.JEAN BRIDIANE

Email analysis :

NOTE : noreply@reversing.co.il
NOTE : 104.167.99.34 (reversing.co.il)

Dear Beneficiary $3.6 Million USA Dollars,

Dear Beneficiary $3.6 Million USA Dollars,

This is to inform you that your funds of $3.6 Million USA Dollars which was on hold by the International Monetary Funds for the past few months ago and we did not heard from you again, so after the board executives meeting yesterday it was concluded that your fund should be release to you. So it has been forwarded to the D.H.L for the immediate delivery to you. today afternoon and i will give you tracking numbers, So the only fee you have to pay to them is $49.00USD for them to purchase your delivery files and start delivery your consignment tomorrow and arrive time is 5:35PM your time make sure that you must be at home tomorrow at 5:35PM after sending this last fee and forward your delivery address with the MTCN# be very fast and do this transfer so your package will follow first P.L.N Tomorrow, here is tracking to others people who receive their own last three weeks to confirm that you will receive your own like him just tracking with www.dhl.com Tracking number (Waybill: 3649333240)

Find below information where you send the require $49.00 for the immediate via MONEY GRAM

Receiver------------ JOHN OZU
Country-----------------Benin Republic
Location City---------Cotonou
Text Question--------When
Answer-----------------Now
Amount--------------$49.Only
Mtcn-----------------
Sender ------------
Your receiver name ...............
And your home address..............

Be advise that the $49.00 is a compulsory as they told me that is only money you will pay until you receive your payment completely.

I will be looking forward to hear from you with the payment information's and your receiver address.

Email(ups.courier201@gmail.com)
+229 62255849
Yours faithfully.

Mr Karim Barhoumi
International Monetary Funds (IMF)
Representative in Benin Republic

Email analysis :

NOTE : ups.courier201@gmail.com
NOTE : kazupyon.@mbg.ocn.ne.jp
NOTE : [197.234.219.73]


NOTE : 153.149.231.12 (mogw1006.ocn.ad.jp)

Monday, September 19, 2016

INFO..

Samsung Group Belgium/Nationale Loterij Belgie.
http://www.samsung.com/be/home/
Avenue Marnix 50 -1000 Brussels,
2nd floor- 1000 Brussels
Belgium
Phone: +32 499 8890 86
Reply to Email: smg.dpt.sterling@gmail.com
ATTENTION: Winner,

SAMSUNG GROUP BELGIUM AWARD CLAIMS VERIFICATION FORM

Dear Winner,

We at Samsung Group Belgium (Samsung Mobile, Samsung TV and Samsung Appliance) likes to officially congratulate you for the draw that was held by our company which featured you as the second place winner. Our company holds promotions each year just to promote our global publicity and reputations as we plan to exploit more corners of the world with our highly valued products line. This promotion is just one of various ways we are presently using to achieve this global vision of ours. Your email address with Samsung Winning ID (SAM-29103-LGT-901GH-9JLSUNG) was luckily drawn to be this year's second place winner of a Brand New SAMSUNG GALAXY S6 EDGE 128GB GOLD/ Samsung UE88JS9500 Smart TV and a cash prize of € 750,000 EUR. This money and we believe will enable you make some impact in the society and possibly make our brand your favorite in the near future. You can visit our website shown above for more details on our new brand of electronics & home appliance. Ensure you contact Mr. Sterling Harrison who is our claims official in Europe, United Kingdom and can understand you’re English and some European languages. See details of him below.

Name: Mr. Sterling Harrison
Email: smg.dpt.sterling@gmail.com
Address: Avenue Marnix 50 -1000 Brussels

When contacting the claims agent you should include the following if you must get a response from him;

*** Your Full Name
*** Address
*** Phone number
*** Age
*** Gender
*** Occupation
*** Winning Email

Thanks for been part of this year promotional award program .We wish you the best of luck as you spend your good fortune. *Winners are advised to keep their winning details/information from the public to avoid fraudulent claim (IMPORTANT) pending the prize claim by Winner. This is a private email. Any breach of confidentiality means automatic disqualification.

Congratulation!!!

Sincerely.
Signed,
Mrs, Li Haicang (Sec.)
________________________________________________________
*NOTE** you must be 22 years above to claim. Late response is not accepted. Misconduct and non-adherence to instructions leads to prize termination.

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

Email analysis :

NOTE : smg.dpt.sterling@gmail.com
NOTE : info@samsung.com
NOTE : Received : from 62.205.112.81 ([62.205.112.81])


NOTE : by webmail.salondiamante.com (Horde Framework)
NOTE : User-Agent : Internet Messaging Program (IMP) H3 (4.3.11)

[SPAM] IT'S IMPORTANT

ATTN:

Mr. Bryant Calvert is contacting you with IMPORTANT INFORMATION:

I got your contact during my search for a reliable partner, my boss Mr. Mikhail B. Khodorkovsky is looking to work with a reputable individual/firm with experience in the real estate sector. He intend to place funds into viable real estate/resort & reputatble investment venture in your Country.

I look forward to working with you on a long term business relationship.
As soon as I get your prompt respond, I will give you more detail.

Best Regards,

Orlando Bloom.
Assistant to Mr. Khodorovsky,
Moscow, Russia.

Email analysis :

NOTE : orlando.bloom312@gmail.com
NOTE : orlando_bloom@mail.ru
NOTE : Received : from [46.183.223.70]


NOTE : (port=53913 helo=User)
NOTE : by LtV45.Vitaiswnsdot.com

Investment Proposal

Good Day. How are you and the family ? My contacting you is based on investment establishment in your country. Be aware that I am in a desire of any investments establishment that will guarantee a safe and secured profitable returns in terms of Energy Renewals, Transportation, Agriculture, Aviation, Oil and Gas, Real Estates, Hotel Resorts, Casinos etc. or any other businesses or investment interest of your choice that you believe will be encouraging enough for us to established in your home town and I am very ready to co-operate and partner with you. Please reply back to this e-mail address (peruffosergio20@outlook.com) to enable me give you more details about the investment establishment plans and how much is the total amount that I am intending to invest in your country. Say me well to the family as I wait to read from you soon. Regards. Dr.Per.Serg.

Email analysis :

NOTE : peruffosergio20@outlook.com
NOTE : X-Php-Script : www.inn-tech.in/Mailers.php
NOTE : for 73.41.199.111

Employees REQUESTED

Good Day, our company is currently recruiting individuals in Canada and USA on a 6 months contract basis to act as representatives to help their growing business in their various areas of location, it's part time job that takes less than an hour of your time daily with a 5% commission and $4,900 monthly salary payment. If interested?

Please send us an email to the email address below;
Email: info1@investmentcomj.net

All application must be sent to the above email to ensure a response.

© 2016 Japan Alternative Investment Co. Ltd.® All Rights Reserved We look forward to working with you.

Email analysis :

NOTE : Pedro_Venegas@berea.edu
NOTE : info1@investmentcomj.net
NOTE : Employees REQUESTED
NOTE : X-Originating-Ip : [209.95.50.62]


NOTE : @bereacollege server was used to relay a scam.
NOTE : Possible impacted account : https://www.facebook.com/pedro.venegas.334

Loan offer

Hello,

BarclaysHomeFinance is offering loan at a low interest rate of 2.5%.do You need a loan of any kind ? if yes email now for more info

best regards,

Email analysis :

NOTE : jlgonzalez@century21.com.ve
NOTE : X-Originating-Ip : [197.211.57.91]

Need a loan?

WE GIVE OUT LOANS FOR 6.2% INTEREST RATE AND WE OFFER LOANS FROM $5,000 TO $50,000,000.00.

SAMETIME LOAN SERVICE INCLUDES:

: EASY PERSONAL CASH LOANS
: PERSONAL CASH LOANS WHILE BLACKLISTED
: QUICK PERSONAL CASH LOANS
: SMALL PERSONAL CASH
: COLLATERAL LOANS
: CAR,HOUSE,SMALL BUSINESS, INSURANCE

DO CONTACT US FOR MORE INFORMATION VIA : INFO@SAMETIMELOAN.COM

Email analysis :

NOTE : Received : from RichardDawkins.www.huaweimobilewifi.com
NOTE : (unknown [41.144.94.69])


NOTE : (Authenticated sender: naren@pecspower.co.za) by mail03.itech2000.net

Sunday, September 18, 2016

Attn: Beneficiary.

ECONOMIC & FINANCIAL CRIME COMMISSION (EFCC) FOREIGN OPERATIONS DEPT, Email and call BARR, JOHN SMITH (EFCC Recovery Fund Unit) Attn: Beneficiary, I am Mr. Ibrahim Larmode the new chairman of ECONOMIC & FINANCIAL CRIME COMMISSION (EFCC). EFCC in alliance with economic community of West African states (ECOWAS) with head Office here in Nigeria. We have been working towards the eradication of fraudsters and scam Artists in Western part of Africa With the help of United States Government and the United Nations. We have been able to track down so many of this scam artist in various parts of west African countries which includes (NIGERIA, REPUBLIC OF BENIN, TOGO, GHANA CAMEROUN AND SENEGAL) and they are all in our custody here in Lagos Nigeria. We have been able to recover so much money from these scam artists. The United Nation Anti-crime commission and the United State Government have ordered the money recovered from the Scammers to be shared among 100 Lucky people around the globe. This email is being directed to you because your email address was found in one of the scam Artists file and computer hard disk in our custody here in Nigeria and with the information gardened from this Scam artist, we notice that you have been scammed of so much money and have decided to compensate you with a little token to recover the loss of your fund. You are therefore being compensated with the total sum $2.5 Million Dollars. We have also arrested all those who claim that they are Barristers, bank officials, Lottery Agents who has money for transfer or want you to be the next of kin of such funds which does not exist. Since your name appeared among the lucky beneficiaries who will receive a compensation of US$2.5 Million, we have made arrangement to register an Online Banking through our Global Bank, where you will have full access to your Online Banking Account Fund, to transfer your fund personally to your Private Bank Account with no complication of things or questioning as the Account will be fully registered in your Name. Feel free to contact the processing officer BARR, JOHN SMITH. The online Banking Processing is made much easier for you to transfer your fund to your private Bank Account personally, to avoid any delay or complication of things. With this Online Banking Transfer Processing, you can only transfer the Maximum Amount of US$500.000.00 daily/Instalmentaly until the total amount of your Compensated/deposited fund is transferred and completely paid to you. So you are advice to contact, processing officer BARR, JOHN SMITH with your provided information’s required for verification below. CONTACT PERSON: MR. BARR, JOHN SMITH. CONTACT EMAIL ADDRESS: barrjohnsmith17@gmail.com CONTACT TELEPHONE: +234-9058488752. Provide the information bellow to enable the processing of your Online Banking Account for deposition of your total compensated fund. 1) YOUR FULL NAME. 2) YOUR ADDRESS. 3) YOUR TELEPHONE NUMBER. 4) YOUR OCCUPATION 5) YOUR IDENTITY. 6) COUNTRY Contact: BARR, JOHN SMITH with the information required for verification to enable him start the processing of your Online Banking Account Registration We guarantee your safety and wish you the best of luck. Best Regard, Mr. Ibrahim Larmode CHAIRMAN ECONOMIC & FINANCIAL CRIME COMMISSION (EFCC) FOREIGN OPERATIONS DEPT, NIGERIA, LAGOS-NIGERIA

Email analysis :

NOTE : barrjohnsmith17@gmail.com
NOTE : webmaster@clouddocs.ca
NOTE : 192.168.43.70
NOTE : 197.211.58.15
NOTE : 192.69.133.175 ()

Sunday, September 11, 2016

Rép : western union payment.

Re: Dear Beneficiary

We have finally sending you the first payment today, due to the restriction, we are limited to send US$4,500 therefore, you will be receiving the same on daily basis until we finish sending all your fund $4.5 Million USD. Below is the information; Check the status with https://wumt.westernunion.com/asp/orderStatus.asp?country=TW email him direct on:(wumenu403@gmail.com ) MTCN: 9682093879 Sender's name: Albert Noudeke Amount :$4,500 Meanwhile we regret to inform you that you need to pay sum of $55 for western union activation charges and you should send the money directly to.

HERE IS THE INFORMATION TO SEND THE $55 VIA WESTERN UNION OR MONEY GRAM MONEY TRANSFER BELOW:

RECEIVER NAME: ( LARRY DANIEL )
ADDRESS: 1-BP AVENUE 4563 Akpapa,
City: Cotonou
Country Benin

Best Regards:
CONTACT NAME : Mr.Robert William
Tel Ph : +229 9820 6960
Please call for your western union MTCN # : 9682093879

Email analysis :

NOTE : wumenu403@gmail.com
NOTE : united.bnkafrica@hotmail.com
NOTE : Received : from User (unknown [41.86.238.14])


NOTE : by host1.infrastructureontario.io